5.3
Moyenne
CVE-2026-94273 The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually…
Description
The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved transaction before marking a WooCommerce order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without completing payment.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Snap Finance 3.11 | premières → 3.11.0 | Pas de correctif indiqué |